How to Mitigate Risks When Choosing an Unknown Vendor